Default Protection Profiles; Protection Profile Options - Fortinet FortiGate FortiGate-60M Administration Manual

Firewall

Default protection profiles

Protection profile options

FortiGate-60M Administration Guide
The FortiGate unit comes preconfigured with four protection profiles.
Strict To apply maximum protection to HTTP, FTP, IMAP, POP3, and SMTP traffic.
You may not wish to use the strict protection profile under normal
circumstances but it is available if you have extreme problems with viruses
and require maximum screening.
Scan To apply virus scanning to HTTP, FTP, IMAP, POP3, and SMTP traffic.
Web To apply virus scanning and web content blocking to HTTP traffic. You can
add this protection profile to firewall policies that control HTTP traffic.
Unfiltered To apply no scanning, blocking or IPS. Use the unfiltered content profile if
you do not want to apply content protection to content traffic. You can add
this protection profile to firewall policies for connections between highly
trusted or highly secure networks where content does not need to be
protected.
Figure 106:Adding a protection profile
You can configure the following options when creating or editing a protection profile.
Profile Name
Anti-Virus
Web Filtering
Web Category Filtering
Spam Filtering
IPS
Content Archive
01-28007-0144-20041217
Enter a name for the profile. (New profiles only.)
See "Configuring antivirus options" on page
See "Configuring web filtering options" on page
See "Configuring web category filtering options" on page
See "Configuring spam filtering options" on page
See "Configuring IPS options" on page
See "Configuring content archive options" on page
Protection profile
226.
227.
227.
228.
229.
229.
225